PT-2009-3065 · Novell · Novell Groupwise

Nick Debaggis

·

CVE-2009-0410

·

Published

2009-02-03

·

Updated

2018-10-11

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Novell GroupWise versions 6.5x through 8.0
Description The issue is caused by an off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA), allowing remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command. This leads to a buffer overflow.
Recommendations For Novell GroupWise versions 6.5x through 8.0, update to a version that includes a fix for the off-by-one error in the SMTP daemon.

Exploit

Fix

RCE

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-0410

Affected Products

Novell Groupwise